Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等
- java-asm
- java-decompiler
- static-analysis
- vulnerability
Repository Index
87,573 visible repositories in the index
529–552 of 1,542 · Most stars
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
- ctid
- cybersecurity
- threat-informed-defense
- mitre-attack
Master Federated Learning in 2 Hours—Run It on Your PC!
- non-iid
- federated-learning
- personalization
- pytorch
A post exploitation framework designed to operate covertly on heavily monitored environments
- shad0w
- c2
- red-team
- c
密探渗透测试工具包含资产信息收集，子域名爆破，搜索语法，资产测绘（聚合测绘，FO FA，Hunter，Quake,Zoomeye,DayDayMap,censys,shodan, 零零信安），指纹识别，敏感信息采集，文件扫描、端口扫描、弱口令破解、jwt密钥爆破、Sessionkey,heapdump, 微信小程序，密码本，随机用户，社工字典,AI渗透（MCP、代码审计）等功能
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
JA4+ is a suite of network fingerprinting standards
- cybersecurity
- ja3
- ja3-fingerprint
- jarm
Cyber Threat Intelligence Repository expressed in STIX 2.0
- stix
- cti
- cyber-threat-intelligence
- attack
vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
- crawler
- information-gathering
- cms-detector
- cloudflare-detection
ignorant allows you to check if a phone number is used on different sites like snapchat, instagram.
- phone-number
- trio
- snapchat
Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
Phone number OSINT toolkit with multi-API search (Google, GitHub, Numverify, Reddit, DuckDuckGo), Hudson Rock infostealer intelligence, and automatic report generation.
- osint
- python
- searchphone
- api-scraping
domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等
- domain-hunter
- web-title
- domain-discovery
- subject-alternative-name
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
Open-Source Shellcode & PE Packer
- shellcode
- antivirus-evasion
- redteam
- hacktoberfest
Wiki-like CTF write-ups repository, maintained by the community. 2017
This tool gives information about the phone number that you entered.
- osint
- osint-tool
- advanced-osint-tool
- advanced
:new: The Multi-Tool Web Vulnerability Scanner.
- scanner
- vulnerability-scanners
- scanner-web
- web-vulnerabilities-scanner
Abusing Certificate Transparency logs for getting HTTPS websites subdomains.
- certificate-transparency
- certificate-transparency-logs
- information-gathering
- pentesting
Platform for emulation and dynamic analysis of Linux-based firmware
Windows kernel and user mode emulation.
Minimalistic web app designed for sending private and secure notes.
- end-to-end-encryption
- minimalist
- note
- pastebin
A suite of tools to automate software compliance checks.
- package-manager
- dependencies
- dependency-graph
- license
A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
- browser-automation
- debugging
- deobfuscation
- js-reverse